CVE-2024-1228
Hardcoded password in Eurosoft Przychodnia
Vexday Risk Score
28Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 9.3EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
10 Jun 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Use of hard-coded password to the patients' database allows an attacker to retrieve sensitive data stored in the database. The password is the same among all Eurosoft Przychodnia installations.
This issue affects Eurosoft Przychodnia software before version 20240417.001 (from that version vulnerability is fixed).
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:H/SA:H/AU:Y/R:U/V:C/RE:M/U:Red
Affected products
EuroSoft Sp. z o. o. · Eurosoft PrzychodniaWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →